
$ rpki-client -vvf rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
File: qzsSgRukXmOSsAXTQfk6DQfyqxw.mft (raw, json)
Hash identifier: hGu3LSlnvrbu5/+MOxQWYLeYAGOvJv+ApP7ZBceFGKg=
Subject key identifier: 3C:B3:37:3B:AC:CB:62:F7:E5:1C:B3:8E:C0:EA:31:D3:F7:16:C8:43
Authority key identifier: AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
Certificate issuer: /CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
Manifest number: 023C
Signing time: Sun 05 Apr 2026 02:05:28 +0000
Manifest this update: Sun 05 Apr 2026 02:05:27 +0000
Manifest next update: Sun 12 Apr 2026 02:05:27 +0000
Files and hashes: 1: qzsSgRukXmOSsAXTQfk6DQfyqxw.crl (hash: uIo2TJYW7r9XjSeEuM4zBdre+tSWyy3rhspriXD2Kl0=)
2: 8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa (hash: ag4sWVEE6696Uatb2RvVK5W48ijULl0+4Lnio86PfMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl
rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918557B, serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
Validity
Not Before: Apr 5 02:05:27 2026 GMT
Not After : Apr 12 02:05:27 2026 GMT
Subject: CN=69d1c368-f20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:df:ab:1d:6a:5f:4d:c9:0b:56:b4:ba:a1:
32:95:a1:ad:90:e0:96:85:ca:73:42:bf:18:3d:f5:
99:ab:57:b7:ba:c2:cb:95:b1:fd:d3:60:73:e2:4d:
a6:e7:34:24:f5:11:d9:02:ee:22:c4:39:36:e0:88:
75:6b:fe:f5:78:50:0e:8c:47:cb:36:f1:dc:3c:94:
37:9e:74:b1:fc:b7:1d:81:87:a5:42:1c:55:d8:2b:
a7:21:e4:eb:41:dd:df:87:9c:d7:8b:76:96:0f:77:
4c:e8:4b:10:a4:ee:f0:43:0c:75:86:d2:89:c7:bd:
11:f7:43:03:c0:3b:f7:43:84:db:f6:21:be:e7:3c:
67:88:45:6d:08:a7:eb:c7:fc:32:a6:6b:b7:f8:5c:
e7:14:a7:16:73:f8:7a:c6:9f:2f:a7:fd:9c:2e:57:
4a:98:23:dc:2c:2d:b2:ae:71:64:64:fa:21:00:ab:
13:a8:59:b4:db:06:4a:da:72:3d:d7:de:b7:d1:1b:
e2:db:1e:fa:db:95:a2:90:59:f8:30:e2:b9:7d:9f:
9a:0c:23:2e:b2:62:d3:a4:d4:d0:7b:bd:aa:bc:d8:
6d:c6:fd:69:98:7b:6c:30:eb:e6:7d:8f:cb:25:d1:
e8:03:e2:79:3c:d5:29:80:9d:4d:5e:fa:23:6f:a5:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B3:37:3B:AC:CB:62:F7:E5:1C:B3:8E:C0:EA:31:D3:F7:16:C8:43
X509v3 Authority Key Identifier:
keyid:AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:65:e6:f4:b7:61:f5:2f:f5:a5:f0:8a:54:e5:58:9d:44:85:
02:ca:37:c8:b8:db:69:02:71:5a:b8:15:3e:51:2f:04:80:ae:
2c:9b:5d:7a:be:b4:c4:a9:88:e1:d0:12:b0:1f:d3:a6:d6:e3:
bd:60:92:88:8e:8e:b8:2b:28:e6:73:37:f0:3b:65:52:11:19:
34:59:48:b1:da:4e:1c:f9:d4:e6:80:38:4f:f2:da:03:c1:a4:
66:03:fc:bd:6a:50:51:4e:a4:a4:28:50:1b:a9:07:99:6c:42:
46:a1:7f:8e:91:81:16:08:65:27:a3:93:b5:ab:c9:9a:30:74:
0a:87:26:f1:91:f0:ad:be:1f:5a:8c:d0:ba:39:f3:cc:87:b1:
5d:aa:b9:90:4c:c0:57:f0:0c:2f:aa:e6:61:5a:a7:f8:ea:65:
73:fb:55:2c:4a:ed:4f:c0:5a:e4:5b:34:13:78:8a:81:0b:85:
db:0e:d9:f0:18:73:1e:51:40:13:71:4e:5e:65:7d:bf:5a:9d:
4d:b0:af:7c:22:09:c2:cb:3b:d0:18:b1:59:7b:18:c9:e4:5d:
ce:18:13:31:11:d4:d2:4d:50:ed:c5:ad:f1:75:00:2c:52:79:
75:8e:98:0f:95:b2:bd:73:95:15:18:1a:7e:09:ae:95:9b:b7:
4e:6a:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 03:37:51 2026 by rpki-client